Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa
File:                     323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (raw, json)
Hash identifier:          v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=
Subject key identifier:   12:E5:34:1C:D0:14:C3:E5:61:B6:29:70:3A:10:40:AA:5E:45:A1:63
Certificate issuer:       /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E
Certificate serial:       44966EFF2BFD1D13E03E18102F6AEBE618A44D08
Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa
Signing time:             Sun 03 May 2026 03:02:45 +0000
ROA not before:           Sun 03 May 2026 02:57:45 +0000
ROA not after:            Sun 02 May 2027 03:02:45 +0000
asID:                     140452
IP address blocks:        2001:df4:2d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl
                          rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:96:6e:ff:2b:fd:1d:13:e0:3e:18:10:2f:6a:eb:e6:18:a4:4d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E
        Validity
            Not Before: May  3 02:57:45 2026 GMT
            Not After : May  2 03:02:45 2027 GMT
        Subject: CN=12E5341CD014C3E561B629703A1040AA5E45A163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:29:25:f0:3c:32:e0:4d:be:a2:4c:d4:d9:
                    66:25:f4:6f:87:39:eb:b7:68:1c:66:5f:c5:a7:20:
                    08:56:4c:74:a6:28:18:f5:e2:8d:e1:41:1d:29:0a:
                    2d:6a:11:52:71:fb:3d:53:86:b6:2a:85:96:8b:de:
                    d6:f9:8d:24:5c:44:4c:f9:7a:7e:94:7f:4e:fe:0d:
                    5e:26:b5:66:a2:04:be:20:b1:29:aa:98:ae:ba:9e:
                    fc:85:d4:66:98:b2:8f:dd:f7:44:70:14:5a:4a:f4:
                    6a:18:72:49:4f:9b:3c:24:fe:5a:74:08:8b:9c:ff:
                    38:e2:82:3b:42:85:f3:b7:7f:26:32:35:4f:ad:47:
                    79:07:fa:14:d1:da:ee:05:af:ea:af:3c:c0:1b:5a:
                    8a:08:26:81:73:ba:3a:70:f8:77:42:ed:90:df:28:
                    2f:ba:b6:f9:14:37:f9:ca:64:82:7b:13:22:93:ee:
                    57:78:f9:04:ed:8e:93:f9:7d:73:a6:7f:7c:30:c9:
                    02:1c:86:91:25:cb:72:49:ce:cd:6d:15:33:48:97:
                    53:ff:55:76:be:ee:b3:3d:e8:a4:e7:29:5f:3c:27:
                    ff:a2:2b:a4:08:87:9b:0f:da:eb:c6:91:3e:5e:59:
                    6e:92:56:e5:09:b2:aa:31:33:28:93:33:2d:3a:e1:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:34:1C:D0:14:C3:E5:61:B6:29:70:3A:10:40:AA:5E:45:A1:63
            X509v3 Authority Key Identifier:
                keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:a6:68:6e:73:24:9a:22:e2:7f:bc:32:7c:eb:39:e6:84:
         fa:98:4a:48:e6:ed:32:48:14:35:78:fe:8c:7d:fe:ca:e5:84:
         04:bc:6f:5a:98:50:c5:6e:ca:69:ee:d9:3f:46:4a:99:b0:61:
         35:8a:25:4b:00:92:30:f4:9c:7b:dd:92:6a:e8:96:54:7a:90:
         d5:bd:50:ae:55:5d:fe:5d:1c:a2:2f:94:48:ad:5a:14:45:d0:
         90:d3:72:95:11:4a:22:49:47:13:41:c7:2e:a5:ff:e0:ea:c9:
         af:85:cc:a0:a8:13:c4:40:84:8b:09:b1:81:aa:0d:12:5f:3a:
         d0:07:53:27:35:6b:2a:bf:47:77:b3:13:0b:01:14:b8:92:4f:
         0d:27:74:b0:29:a5:96:ea:2a:4c:96:cd:8e:a5:5a:1c:9b:dc:
         58:95:c8:d3:fa:bc:a8:0f:a7:0d:0c:36:f1:83:aa:99:a6:a0:
         28:ed:f7:2b:e5:34:58:21:cb:6e:99:7e:08:d7:f4:b4:43:bd:
         6b:b6:50:53:a3:00:b0:ba:9f:ff:84:46:de:27:19:f5:81:7c:
         f9:00:b7:84:aa:5d:f5:06:34:84:3f:72:e4:23:63:bd:62:45:
         6c:f7:43:67:9c:02:a5:88:6f:92:09:80:bd:69:3f:7c:80:82:
         9b:00:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:05 2026 by rpki-client